If your looking to monitor startup traffic from the box I would
think it would be better to setup Wireshark on another system and attach that
box to a hub / tap / span port / ect. That way you can get everything that
happens on boot. If you don’t know when the system will reboot you can also
set up a ring buffer for the capture so it will always be running with out
killing your disk space.
Just a thought
tim
From:
wireshark-users-bounces@xxxxxxxxxxxxx
[mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of Hrishikesh
Murali
Sent: Thursday, January 14, 2010 5:58 AM
To: Community support list for Wireshark
Subject: Re: [Wireshark-users] how to start Wireshark automatically at
each boot-up?
Hi,
On Thu, Jan 14, 2010 at 5:20 AM, Dai Nish <dai_nish@xxxxxxxxxxx> wrote:
Please advise me how you could
start Wireshark automatically and use it to monitor network
traffic at each boot-up.
Just add the line "wireshark&" to /etc/rc.local
--
Thanks and Regards,
Hrishikesh Murali